The WShell THOR Webshells yar File Malware Analysis

The WShell_THOR_Webshells.yar File Analysis

Updated 11 days ago

Checked by Malware Check

WShell_THOR_Webshells.yar

Technical Analysis

File Name	WShell_THOR_Webshells.yar
File Type	HTML
Magic Bytes	`HTML document, ASCII text, with very long lines (400u)`
SSDEEP Hash	6144:ZKGfxcJBwwBNPn1FPQlcQnJ0l9f2IGRrYvzbz:PVil3Pvzbz
Scanner Version	1.0.231.174
Database Version	2025-12-30 03:00:31 UTC

⚠

Suspicious File Detected

Detected by 10 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

16%

Detection Rate

306,810

File Size (bytes)

10/61

Engines Detected

2025-12-30

Analysis Date

File Identification

Hash Type	Value	Action
MD5	5b4fb34d38109623acf41fe1c7dda4dd
SHA1	71c89cbbe5ac322f87f31376ccc4e75b2fef74ff
SHA256	1434419ec7277717ee7e2a9453543939c0e01ca7551c0bd8cb7468b672d2a99b
SHA512	1bbb3e19066f5b225d77e94f053f2848c2f8d9b32accfb547828fc6cdddd8bf7f64f5c21e54634b408634bbe94feabcfa3af687104b5f4dbe64d7c8ffaf4b586

Security Engines with Detections (10 of 61)

ClamAV

Php.Exploit.C99-27 Malicious

Sangfor

Malware.Generic-Script.Save.80a232fb Malicious

Avast

PHP:Agent-BS [Trj] Malicious

Cynet

Malicious (score: 99) Malicious

Tencent

Backdoor.Php.Eval.abb Malicious

Google

Detected Malicious

Varist

ABRisk.FKHN-4 Malicious

Rising

Backdoor.WebShell/PHP!1.12C26 (CLASSIC) Malicious

AVG

PHP:Agent-BS [Trj] Malicious

alibabacloud

Backdoor:Unknow/Dirtelti.Gen Malicious

51 engines reported no threats - Only engines with detections are shown above for clarity

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

10 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for

5 4 3 2 1